Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

【BUG】忘记密码功能,非正常用户所绑定的邮箱仍可接收信息 #892

Closed
neronkl opened this issue Jan 31, 2023 · 2 comments
Assignees
Labels
Layer: api Api module related Priority: Middlum Middlum priority
Milestone

Comments

@neronkl
Copy link
Contributor

neronkl commented Jan 31, 2023

用文字描述你遇到的问题
忘记密码功能,非正常用户所绑定的邮箱仍可接收信息

重现方法

测试用户分别进行禁用,删除,enable=0。该测试用户所绑定的邮箱进行忘记密码功能触发

预期行为

非正常状态用户所绑定邮箱无法接收相应邮件

版本

  • v2.5.1

如果是 SaaS 页面问题,请提供使用的操作系统和浏览器信息

  • OS: [e.g. iOS]
  • Browser [e.g. chrome, safari]
  • Version [e.g. 22]

额外信息

任何你觉得有助于问题解决的内容

@neronkl neronkl changed the title 【BUG】 【BUG】忘记密码功能,非正常用户所绑定的邮箱仍可接收信息 Jan 31, 2023
@wklken
Copy link
Collaborator

wklken commented Jan 31, 2023

重置密码的链路上, 删选用户的地方加对应的判断逻辑 => 注意需要确认类似冻结等所有状态的处理方式

注意, 需要打详细的日志(因为无法不发送邮件在前端也是显示发送成功, 安全原因)


如果比较紧急并且有人力, 可以安排 2.5.3 支持

@wklken wklken added Priority: Middlum Middlum priority Layer: api Api module related todo 进入开发排期的状态,纳入了最近的迭代 labels Jan 31, 2023
@wklken wklken added this to the Y2023M05 milestone Feb 2, 2023
@wklken wklken modified the milestones: Y2023M05, Release: v2.5.3 Feb 2, 2023
@Shutulee Shutulee modified the milestones: Y2023M05, Y2023M06 Feb 6, 2023
wklken pushed a commit that referenced this issue Feb 6, 2023
@wklken
Copy link
Collaborator

wklken commented Feb 6, 2023

#894

@wklken wklken closed this as completed Feb 6, 2023
@nannan00 nannan00 mentioned this issue Apr 7, 2023
@nannan00 nannan00 removed the todo 进入开发排期的状态,纳入了最近的迭代 label Jul 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Layer: api Api module related Priority: Middlum Middlum priority
Projects
None yet
Development

No branches or pull requests

5 participants